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AMENDMENTS TO THE CLAIMS: 

This listing of claims will replace all prior versions, and listings, of claims in the 
application: 

1. (Currently Amended) A method of exchanging user-specific data from a mobile 
network to a service application of an external service provider, wherein certain user data 
is needed by the application for providing a requested service to a mobile user, 
characterised bv the following steps the method comprising : 

- A) generating a unique Application User Identification (AUID) code which is 
assigned to a combination of the mobile user and the application, 

- B) sending the assigned AUID code to the application, 

- C) receiving from the application a request for the needed user data together with an 
AUID code, 

- D) determining whether the application is allowed to retrieve the requested user data, 
and if so 

- E) retrieving the requested user data based on the received AUID code and sending 
the user data to the application. 

2. (Currently Amended) A method according to claim 1, characterised in that wherein 
the AUID code is generated in step A) in response to receiving a service request from a 
mobile user. 

3. (Currently Amended) A method according to claim characterised in 
tha twherein the AUID code is stored in a translation table together with a mobile user 
identity and an application identity. 
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4. (Currently Amended) A method according to claim 3, characterised in that wherein 
the mobile user identity is obtained from the translation table based on the AUID code 
received in step C), for retrieving the requested user data in step E) from a user data base 
in which user-specific data is stored for mobile users being registered in the mobile 
network. 



5. (Currently Amended) A method according to any of claims 1 — 4 claim 1 , 
characterised in that wherein the AUID code is used by the application for attributing 
the user data sent in step E), to the service upon subsequent access of the mobile user to 
the same service. 



6. (Currently Amended) A method according to any of claims 1 — S claim L 
characterised in that wherein the determining step D) is performed by checking a 
permission table specifying the types of user data that each service application is allowed 
to receive from the mobile network. 



7. (Currently Amended) A method according to claim 6, characterised in that a further 
comprising maintaining a permission table is maintain e d for a specific user or group of 
users. 



8. (Currently Amended) A method according to claim characterised in that 
further comprising sending an error message is sent if it is determined in step D) that the 
application is not allowed to retrieve the requested user data. 

9. (Currently Amended) A method according to any of claims 1 — 8 claim 1 , 
characterised in tha t further comprising generating new AUID codes are generated by 
dividing the decimal representation of a non-periodic irrational number into blocks of a 
certain length, wherein each block is used as an AUID code. 
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10. (Currently Amended) A method according to any of claims 1 — 9 claim 1 , 
characterised bv the step o ff urther comprising determining whether a valid mobile user 
identity exists that corresponds to the AUID code received in step C) in order to check if 
the application is authorised. 

1 1 . (Currently Amended) A data control server for exchanging user-specific data from a 
mobile network to a service application of an external service provider, wherein certain 
user data is needed by the application for providing a requested service to a mobile user, 
characterised by comprising : 

- means for generating a unique Application User Identification (AUID) code which is 
assigned to a combination of the mobile user and the application, 

- means for sending the assigned AUID code to the application, 

- means for receiving from the application a request for the needed user data together 
with an AUID code, 

- means for determining whether the application is allowed to retrieve the requested 
user data, and 

- means for retrieving the requested user data based on a received AUID code and 
sending the user data to the application. 

12. (Currently Amended) A server according to claim 11, characteri s ed bv further 
comprising a permission table specifying the types of user data that each service 
application is allowed to receive from the mobile network. 

13. (Currently Amended) A server according to claim 11 or 12 , characteri s ed bv further 
comprising a translation table for storing the AUID code together with a mobile user 
identity and an application identity. 
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14. (Currently Amended) A server according to claim 13, charact e ri s ed by further 
comprising a translator for translating AUID codes into mobile user identities and vice 
versa by checking the translation table. 

15. (Currently Amended) A server according to any of claims 1 1 — Hclaim 11 , 
characterised in tha t wherein the code generating means is capable of generating new 
AUID codes by dividing the decimal representation of a non-periodic irrational number 
into blocks of a certain length, wherein each block is used as an AUID code. 

16. (Currently Amended) A server according to any of claims 1 1 — t^claimii, 
characterised bv further comprising a mobile network interface for receiving service 
requests from mobile users, and for retrieving user data. 

17. (Currently Amended) A server according to any of claim s 1 1 — l £claim 1 L 
characterised bv further comprising an external provider interface for receiving requests 
for user data from service applications, and for responding with either the requested data 
or an appropriate error message. 

18. (Currently Amended) A computer program product comprising software code means 
adapted to cause a data control server to perform the method of any of claims 1 — J-Odaim 
1. 
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